Merge pull request #72 from dm0-/sysctl

sysctl: Revert new protections from systemd 241
coreos · Apr 12, 2019 · 81d44f6 · 81d44f6
2 parents 70eae71 + 891d6e0
commit 81d44f6
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/sysctl.d/baselayout.conf b/sysctl.d/baselayout.conf
@@ -10,3 +10,7 @@ net.ipv4.conf.all.rp_filter = 1
 
 # Disable kernel address visibility to non-root users.
 kernel.kptr_restrict = 1
+
+# Disable regular file and FIFO protection for compatibility.
+fs.protected_regular = 0
+fs.protected_fifos = 0